Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/71403B04F7E511EEBC67981CC4F9AE02.roa
File:                     71403B04F7E511EEBC67981CC4F9AE02.roa (raw, json)
Hash identifier:          S/qqaWINFZ4wDr+IpQ0U8AbkYGkGUpN2p85NrVAp8qE=
Subject key identifier:   20:A1:95:BB:7F:F7:93:8E:44:E3:08:03:FF:82:56:21:70:D5:63:48
Certificate issuer:       /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Certificate serial:       02
Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/71403B04F7E511EEBC67981CC4F9AE02.roa
Signing time:             Thu 11 Apr 2024 09:25:31 +0000
ROA not before:           Thu 11 Apr 2024 09:25:31 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     7637
IP address blocks:        192.190.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl
                          rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
        Validity
            Not Before: Apr 11 09:25:31 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6617ac8b-7c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:07:2a:86:cb:1f:a2:b3:86:bc:f8:a7:fd:22:
                    c8:b9:25:0a:14:a0:52:02:d1:07:f1:cb:8b:0f:3c:
                    c9:94:10:9b:3c:b2:36:33:cb:97:18:e0:b2:71:57:
                    28:05:dc:de:7c:e7:60:c2:04:27:23:55:ce:c6:84:
                    1a:4d:3b:7d:6f:11:0e:64:84:ad:43:db:9a:37:ff:
                    93:48:1b:bf:95:ef:de:01:76:1b:7b:51:4d:94:de:
                    bb:18:5a:d0:ae:55:f4:42:35:76:b5:08:db:42:cc:
                    50:7c:4f:e9:09:88:72:3a:d6:1a:1a:23:a9:58:17:
                    e4:3b:36:95:68:e5:8c:2b:3e:ff:8c:c7:40:d9:bd:
                    7c:c9:3d:32:a4:d6:55:58:4d:f2:19:ed:1d:32:dd:
                    f5:9a:3c:21:f3:37:e4:b6:ff:c6:58:ec:e9:2b:99:
                    2b:84:06:e0:7d:57:d3:11:d5:80:f4:a6:1a:e7:06:
                    74:1c:af:04:04:18:f2:cc:52:bf:68:7d:9b:00:3f:
                    81:ab:73:ae:24:b8:a7:5f:c8:41:0f:f9:71:8c:18:
                    d9:52:13:cb:c0:e2:c3:db:ce:f0:43:2d:3e:17:30:
                    92:c5:99:0d:ea:37:a3:4b:0c:f3:ca:ff:cf:3a:bb:
                    58:32:3b:ff:72:c2:fa:f7:bd:4d:6f:6b:69:5a:1f:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A1:95:BB:7F:F7:93:8E:44:E3:08:03:FF:82:56:21:70:D5:63:48
            X509v3 Authority Key Identifier:
                keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/71403B04F7E511EEBC67981CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:3a:07:0f:b3:35:9c:34:af:7a:51:16:0b:4d:93:1c:7c:31:
         c8:3f:a3:a3:0a:5c:24:a9:49:2a:bb:13:08:20:2a:05:90:86:
         0e:2c:fb:f1:e0:4a:27:8f:4a:79:0d:40:a9:e3:7e:39:ba:07:
         71:7d:c4:69:e0:97:8e:c3:3c:83:b8:3c:62:cd:fb:a9:93:60:
         6d:47:d2:11:6d:4d:63:ee:1e:46:c2:35:1a:e8:b4:c7:5f:4e:
         14:50:b7:28:40:df:ab:04:0d:ef:b2:40:72:50:fa:47:f8:54:
         10:30:d9:d6:bf:e6:b2:8f:ca:5a:ca:58:04:f5:47:ad:89:31:
         0d:88:ea:cf:87:0b:bd:f5:8d:97:a2:04:5c:8e:bf:8e:0a:89:
         77:51:6a:07:90:46:8b:00:b5:c2:ef:cb:80:96:43:7b:fe:b8:
         bc:39:ee:54:9b:62:51:f1:ac:d9:b2:b9:d4:2a:e0:b9:77:f9:
         d5:c2:15:cf:86:bc:45:a0:1d:04:59:51:b9:b3:49:d6:b5:05:
         32:b2:f3:b3:ed:dc:02:cb:63:51:3c:5c:c0:66:89:d6:ff:ff:
         72:de:bd:c1:61:6e:ed:4e:21:52:c7:a6:1e:ca:72:9f:fd:76:
         23:a5:00:83:f1:b2:f7:86:59:4b:8c:7d:20:42:36:bd:04:3a:
         6b:35:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:29 2024 by rpki-client on console-fra.rpki-client.org